Unspecified vulnerability in Oracle Containers for J2EE component in Oracle Application Server 10.1.3.0.0 has unknown impact and remote attack vectors, aka Vuln# OC4J04.
http://www.vupen.com/english/advisories/2006/4065
http://www.us-cert.gov/cas/techalerts/TA06-291A.html
http://www.securityfocus.com/bid/20588
http://www.securityfocus.com/archive/1/449711/100/0/threaded
http://www.red-database-security.com/advisory/oracle_cpu_oct_2006.html
http://www.oracle.com/technetwork/topics/security/cpuoct2006-095368.html